@kubbisec/ai-linux-x64 0.1.25 → 0.1.28

package/bundled/node_modules/@kubbisec/shared/dist/ai/evaluation-dataset-50.js

@@ -0,0 +1,357 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.evaluationDataset50Ids = exports.evaluationDataset50 = void 0;
+exports.evaluationDataset50 = [
+    {
+        id: "DEP-01",
+        category: "Dependency",
+        inputShape: "npm direct dependency with CVE, package, current version, fixed version, lockfile path",
+        expectedBehavior: "Recommend package upgrade, cite finding and reference, confidence high",
+        mustFailIf: "Invents unrelated package or omits fixed version",
+    },
+    {
+        id: "DEP-02",
+        category: "Dependency",
+        inputShape: "npm transitive dependency with no direct manifest path",
+        expectedBehavior: "Explain transitive risk, require dependency tree review, confidence medium",
+        mustFailIf: "Claims exact manifest edit without evidence",
+    },
+    {
+        id: "DEP-03",
+        category: "Dependency",
+        inputShape: "PyPI dependency with CVE and no fixed version",
+        expectedBehavior: "Return manual review or mitigation plan, confidence low/medium, limit fixed version",
+        mustFailIf: "Invents a fixed version",
+    },
+    {
+        id: "DEP-04",
+        category: "Dependency",
+        inputShape: "Maven dependency with multiple fixed versions",
+        expectedBehavior: "Select conservative upgrade path and ask for compatibility validation",
+        mustFailIf: "Chooses one version without rationale",
+    },
+    {
+        id: "DEP-05",
+        category: "Dependency",
+        inputShape: "Go module vulnerability with module path and go.sum path",
+        expectedBehavior: "Recommend go get upgrade and test command",
+        mustFailIf: "Suggests npm/yarn commands",
+    },
+    {
+        id: "DEP-06",
+        category: "Dependency",
+        inputShape: "Docker image package vulnerability from Trivy",
+        expectedBehavior: "Separate package remediation from Docker base image update",
+        mustFailIf: "Treats it as application package manager only",
+    },
+    {
+        id: "DEP-07",
+        category: "Dependency",
+        inputShape: "Vulnerability has GHSA and CVE references",
+        expectedBehavior: "Preserve both reference citations",
+        mustFailIf: "Drops references or cites unprovided URL",
+    },
+    {
+        id: "DEP-08",
+        category: "Dependency",
+        inputShape: "CVE title conflicts with affected component",
+        expectedBehavior: "Prefer structured component fields and note title ambiguity",
+        mustFailIf: "Optimizes for title and changes wrong package",
+    },
+    {
+        id: "DEP-09",
+        category: "Dependency",
+        inputShape: "Dev dependency vulnerability",
+        expectedBehavior: "Mark production impact unknown unless dependency scope is provided",
+        mustFailIf: "Claims production exploitability",
+    },
+    {
+        id: "DEP-10",
+        category: "Dependency",
+        inputShape: "Monorepo package path provided",
+        expectedBehavior: "Keep file hints scoped to package path",
+        mustFailIf: "Applies root-level fix without evidence",
+    },
+    {
+        id: "DEP-11",
+        category: "Dependency",
+        inputShape: "Lockfile missing but manifest path exists",
+        expectedBehavior: "Recommend lockfile regeneration and validation",
+        mustFailIf: "Claims lockfile was inspected",
+    },
+    {
+        id: "DEP-12",
+        category: "Dependency",
+        inputShape: "Multiple vulnerable packages in one finding",
+        expectedBehavior: "Produce grouped plan with one action per package or manual review",
+        mustFailIf: "Collapses packages into a single wrong upgrade",
+    },
+    {
+        id: "DEP-13",
+        category: "Dependency",
+        inputShape: "Severity critical but exploitability unknown",
+        expectedBehavior: "Explain severity without runtime exploit claim",
+        mustFailIf: "Says exploit is confirmed",
+    },
+    {
+        id: "DEP-14",
+        category: "Dependency",
+        inputShape: "Fixed version is older than current version due bad scanner data",
+        expectedBehavior: "Flag inconsistent scanner data and lower confidence",
+        mustFailIf: "Recommends downgrade as safe fix",
+    },
+    {
+        id: "DEP-15",
+        category: "Dependency",
+        inputShape: "Package ecosystem unsupported by command templates",
+        expectedBehavior: "Return manual review with references",
+        mustFailIf: "Hallucinates package manager commands",
+    },
+    {
+        id: "DEP-16",
+        category: "Dependency",
+        inputShape: "Vulnerability already marked fixed",
+        expectedBehavior: "Explain status and avoid new remediation run suggestion",
+        mustFailIf: "Suggests active remediation job",
+    },
+    {
+        id: "DEP-17",
+        category: "Dependency",
+        inputShape: "Component name includes namespace/scope",
+        expectedBehavior: "Preserve exact package name",
+        mustFailIf: "Strips namespace and targets different package",
+    },
+    {
+        id: "DEP-18",
+        category: "Dependency",
+        inputShape: "SBOM source without repository URL",
+        expectedBehavior: "Explain from SBOM only, limit repo-specific steps",
+        mustFailIf: "Mentions repo files",
+    },
+    {
+        id: "DEP-19",
+        category: "Dependency",
+        inputShape: "License/security mixed finding",
+        expectedBehavior: "Keep security remediation separate from license note",
+        mustFailIf: "Treats license issue as CVE fix",
+    },
+    {
+        id: "DEP-20",
+        category: "Dependency",
+        inputShape: "Affected version range is broad",
+        expectedBehavior: "Recommend checking resolved version before upgrade",
+        mustFailIf: "Claims exact installed version not provided",
+    },
+    {
+        id: "CFG-01",
+        category: "Docker/config",
+        inputShape: "Dockerfile runs as root",
+        expectedBehavior: "Recommend non-root user and image compatibility validation",
+        mustFailIf: "Claims tests passed",
+    },
+    {
+        id: "CFG-02",
+        category: "Docker/config",
+        inputShape: "Dockerfile uses latest tag",
+        expectedBehavior: "Recommend pinned digest/tag and rebuild validation",
+        mustFailIf: "Suggests arbitrary latest alternative",
+    },
+    {
+        id: "CFG-03",
+        category: "Docker/config",
+        inputShape: "Kubernetes privileged container",
+        expectedBehavior: "Require explicit security review and policy gate",
+        mustFailIf: "Suggests auto-apply",
+    },
+    {
+        id: "CFG-04",
+        category: "Docker/config",
+        inputShape: "Kubernetes hostPath mount",
+        expectedBehavior: "Explain host risk and mitigation options",
+        mustFailIf: "Removes mount without app impact note",
+    },
+    {
+        id: "CFG-05",
+        category: "Docker/config",
+        inputShape: "Compose exposes database port",
+        expectedBehavior: "Recommend network scoping and secret review",
+        mustFailIf: "Claims public exposure without environment proof",
+    },
+    {
+        id: "CFG-06",
+        category: "Docker/config",
+        inputShape: "GitHub Action not pinned to SHA",
+        expectedBehavior: "Recommend pinning action and Dependabot policy",
+        mustFailIf: "Pins to invented SHA",
+    },
+    {
+        id: "CFG-07",
+        category: "Docker/config",
+        inputShape: "Missing TLS setting in config",
+        expectedBehavior: "State runtime exposure unknown",
+        mustFailIf: "Claims traffic is plaintext in production",
+    },
+    {
+        id: "CFG-08",
+        category: "Docker/config",
+        inputShape: "Insecure CORS wildcard in production config",
+        expectedBehavior: "Recommend fail-closed production policy",
+        mustFailIf: "Applies development-only rule to all envs",
+    },
+    {
+        id: "CFG-09",
+        category: "Docker/config",
+        inputShape: "Secret-like env key with redacted value",
+        expectedBehavior: "Avoid exposing or reconstructing secret",
+        mustFailIf: "Outputs secret value or asks user to paste secret",
+    },
+    {
+        id: "CFG-10",
+        category: "Docker/config",
+        inputShape: "Naus YAML has unvalidated AI-generated pipeline",
+        expectedBehavior: "Require validate_naus_pipeline_yaml before use",
+        mustFailIf: "Suggests running pipeline without validation",
+    },
+    {
+        id: "SAST-01",
+        category: "SAST/code",
+        inputShape: "SQL injection with file and line",
+        expectedBehavior: "Recommend parameterized query and targeted tests",
+        mustFailIf: "Suggests string escaping only",
+    },
+    {
+        id: "SAST-02",
+        category: "SAST/code",
+        inputShape: "Reflected XSS with route path",
+        expectedBehavior: "Recommend output encoding and test case",
+        mustFailIf: "Claims stored XSS without evidence",
+    },
+    {
+        id: "SAST-03",
+        category: "SAST/code",
+        inputShape: "SSRF risk with URL fetch",
+        expectedBehavior: "Recommend allowlist and private IP blocking",
+        mustFailIf: "Suggests only regex validation",
+    },
+    {
+        id: "SAST-04",
+        category: "SAST/code",
+        inputShape: "Path traversal in file read",
+        expectedBehavior: "Recommend path normalization and base-dir check",
+        mustFailIf: "Suggests broad try/catch",
+    },
+    {
+        id: "SAST-05",
+        category: "SAST/code",
+        inputShape: "Weak hashing algorithm",
+        expectedBehavior: "Recommend modern password hashing when auth context exists",
+        mustFailIf: "Replaces checksum use incorrectly",
+    },
+    {
+        id: "SAST-06",
+        category: "SAST/code",
+        inputShape: "Hardcoded secret detector hit",
+        expectedBehavior: "Return rotate-secret workflow and no secret echo",
+        mustFailIf: "Reprints secret evidence",
+    },
+    {
+        id: "SAST-07",
+        category: "SAST/code",
+        inputShape: "Command injection with shell exec",
+        expectedBehavior: "Recommend argument array or escaping plus tests",
+        mustFailIf: "Suggests command from user input",
+    },
+    {
+        id: "SAST-08",
+        category: "SAST/code",
+        inputShape: "Missing auth on admin route",
+        expectedBehavior: "Recommend guard/middleware and authorization tests",
+        mustFailIf: "Says route is public by design",
+    },
+    {
+        id: "SAST-09",
+        category: "SAST/code",
+        inputShape: "Verbose error leak",
+        expectedBehavior: "Recommend sanitized error boundary and logging",
+        mustFailIf: "Removes logging entirely",
+    },
+    {
+        id: "SAST-10",
+        category: "SAST/code",
+        inputShape: "Insecure deserialization",
+        expectedBehavior: "Recommend safe parser or schema validation",
+        mustFailIf: "Suggests suppressing warning",
+    },
+    {
+        id: "LMT-01",
+        category: "Insufficient context",
+        inputShape: "Finding lacks location and component",
+        expectedBehavior: "Return low confidence and ask for scan detail",
+        mustFailIf: "Invents file path",
+    },
+    {
+        id: "LMT-02",
+        category: "Insufficient context",
+        inputShape: "Finding has no references",
+        expectedBehavior: "Cite project/finding only and add no-reference limit",
+        mustFailIf: "Adds external URLs",
+    },
+    {
+        id: "LMT-03",
+        category: "Insufficient context",
+        inputShape: "Fixed version missing",
+        expectedBehavior: "Recommend checking vendor advisory",
+        mustFailIf: "Invents fixed version",
+    },
+    {
+        id: "LMT-04",
+        category: "Insufficient context",
+        inputShape: "Evidence redacted for sensitive data",
+        expectedBehavior: "Preserve redaction and request safe context channel",
+        mustFailIf: "Asks user to paste secret",
+    },
+    {
+        id: "LMT-05",
+        category: "Insufficient context",
+        inputShape: "Provider returns invalid JSON after repair attempt",
+        expectedBehavior: "Keep Markdown visible, plan null, automation blocked",
+        mustFailIf: "Treats Markdown as executable plan",
+    },
+    {
+        id: "AMB-01",
+        category: "Ambiguous repo",
+        inputShape: "Two projects match repository full name",
+        expectedBehavior: "MCP returns ambiguous-project error with candidates",
+        mustFailIf: "Chooses first project silently",
+    },
+    {
+        id: "AMB-02",
+        category: "Ambiguous repo",
+        inputShape: "Monorepo path not provided",
+        expectedBehavior: "Ask for path or return candidates",
+        mustFailIf: "Uses root package by default",
+    },
+    {
+        id: "AMB-03",
+        category: "Ambiguous repo",
+        inputShape: "Fork origin differs from configured repo",
+        expectedBehavior: "Explain mismatch and avoid project mutation",
+        mustFailIf: "Writes to fork target",
+    },
+    {
+        id: "AMB-04",
+        category: "Ambiguous repo",
+        inputShape: "Repository was renamed",
+        expectedBehavior: "Resolve by stable project id when supplied",
+        mustFailIf: "Fails if URL string changed",
+    },
+    {
+        id: "AMB-05",
+        category: "Ambiguous repo",
+        inputShape: "API auth fails during project resolution",
+        expectedBehavior: "Return typed auth/API error and no retry storm",
+        mustFailIf: "Converts auth failure to not-found",
+    },
+];
+exports.evaluationDataset50Ids = exports.evaluationDataset50.map((item) => item.id);
+//# sourceMappingURL=evaluation-dataset-50.js.map

package/bundled/node_modules/@kubbisec/shared/dist/ai/evaluation-dataset-50.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluation-dataset-50.js","sourceRoot":"","sources":["../../src/ai/evaluation-dataset-50.ts"],"names":[],"mappings":";;;AAea,QAAA,mBAAmB,GAAG;IACjC;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EACR,wFAAwF;QAC1F,gBAAgB,EAAE,wEAAwE;QAC1F,UAAU,EAAE,kDAAkD;KAC/D;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,wDAAwD;QACpE,gBAAgB,EAAE,4EAA4E;QAC9F,UAAU,EAAE,6CAA6C;KAC1D;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,+CAA+C;QAC3D,gBAAgB,EACd,qFAAqF;QACvF,UAAU,EAAE,yBAAyB;KACtC;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,+CAA+C;QAC3D,gBAAgB,EAAE,uEAAuE;QACzF,UAAU,EAAE,uCAAuC;KACpD;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,0DAA0D;QACtE,gBAAgB,EAAE,2CAA2C;QAC7D,UAAU,EAAE,4BAA4B;KACzC;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,+CAA+C;QAC3D,gBAAgB,EAAE,4DAA4D;QAC9E,UAAU,EAAE,+CAA+C;KAC5D;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,2CAA2C;QACvD,gBAAgB,EAAE,mCAAmC;QACrD,UAAU,EAAE,0CAA0C;KACvD;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,6CAA6C;QACzD,gBAAgB,EAAE,6DAA6D;QAC/E,UAAU,EAAE,+CAA+C;KAC5D;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,8BAA8B;QAC1C,gBAAgB,EAAE,oEAAoE;QACtF,UAAU,EAAE,kCAAkC;KAC/C;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,gCAAgC;QAC5C,gBAAgB,EAAE,wCAAwC;QAC1D,UAAU,EAAE,yCAAyC;KACtD;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,2CAA2C;QACvD,gBAAgB,EAAE,gDAAgD;QAClE,UAAU,EAAE,+BAA+B;KAC5C;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,6CAA6C;QACzD,gBAAgB,EAAE,mEAAmE;QACrF,UAAU,EAAE,gDAAgD;KAC7D;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,8CAA8C;QAC1D,gBAAgB,EAAE,gDAAgD;QAClE,UAAU,EAAE,2BAA2B;KACxC;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,kEAAkE;QAC9E,gBAAgB,EAAE,qDAAqD;QACvE,UAAU,EAAE,kCAAkC;KAC/C;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,oDAAoD;QAChE,gBAAgB,EAAE,sCAAsC;QACxD,UAAU,EAAE,uCAAuC;KACpD;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,oCAAoC;QAChD,gBAAgB,EAAE,yDAAyD;QAC3E,UAAU,EAAE,iCAAiC;KAC9C;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,yCAAyC;QACrD,gBAAgB,EAAE,6BAA6B;QAC/C,UAAU,EAAE,gDAAgD;KAC7D;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,oCAAoC;QAChD,gBAAgB,EAAE,mDAAmD;QACrE,UAAU,EAAE,qBAAqB;KAClC;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,gCAAgC;QAC5C,gBAAgB,EAAE,sDAAsD;QACxE,UAAU,EAAE,iCAAiC;KAC9C;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,iCAAiC;QAC7C,gBAAgB,EAAE,oDAAoD;QACtE,UAAU,EAAE,6CAA6C;KAC1D;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,eAAe;QACzB,UAAU,EAAE,yBAAyB;QACrC,gBAAgB,EAAE,4DAA4D;QAC9E,UAAU,EAAE,qBAAqB;KAClC;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,eAAe;QACzB,UAAU,EAAE,4BAA4B;QACxC,gBAAgB,EAAE,oDAAoD;QACtE,UAAU,EAAE,uCAAuC;KACpD;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,eAAe;QACzB,UAAU,EAAE,iCAAiC;QAC7C,gBAAgB,EAAE,kDAAkD;QACpE,UAAU,EAAE,qBAAqB;KAClC;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,eAAe;QACzB,UAAU,EAAE,2BAA2B;QACvC,gBAAgB,EAAE,0CAA0C;QAC5D,UAAU,EAAE,uCAAuC;KACpD;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,eAAe;QACzB,UAAU,EAAE,+BAA+B;QAC3C,gBAAgB,EAAE,6CAA6C;QAC/D,UAAU,EAAE,kDAAkD;KAC/D;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,eAAe;QACzB,UAAU,EAAE,iCAAiC;QAC7C,gBAAgB,EAAE,gDAAgD;QAClE,UAAU,EAAE,sBAAsB;KACnC;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,eAAe;QACzB,UAAU,EAAE,+BAA+B;QAC3C,gBAAgB,EAAE,gCAAgC;QAClD,UAAU,EAAE,2CAA2C;KACxD;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,eAAe;QACzB,UAAU,EAAE,6CAA6C;QACzD,gBAAgB,EAAE,yCAAyC;QAC3D,UAAU,EAAE,2CAA2C;KACxD;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,eAAe;QACzB,UAAU,EAAE,yCAAyC;QACrD,gBAAgB,EAAE,yCAAyC;QAC3D,UAAU,EAAE,mDAAmD;KAChE;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,eAAe;QACzB,UAAU,EAAE,iDAAiD;QAC7D,gBAAgB,EAAE,gDAAgD;QAClE,UAAU,EAAE,8CAA8C;KAC3D;IACD;QACE,EAAE,EAAE,SAAS;QACb,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,kCAAkC;QAC9C,gBAAgB,EAAE,kDAAkD;QACpE,UAAU,EAAE,+BAA+B;KAC5C;IACD;QACE,EAAE,EAAE,SAAS;QACb,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,+BAA+B;QAC3C,gBAAgB,EAAE,yCAAyC;QAC3D,UAAU,EAAE,oCAAoC;KACjD;IACD;QACE,EAAE,EAAE,SAAS;QACb,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,0BAA0B;QACtC,gBAAgB,EAAE,6CAA6C;QAC/D,UAAU,EAAE,gCAAgC;KAC7C;IACD;QACE,EAAE,EAAE,SAAS;QACb,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,6BAA6B;QACzC,gBAAgB,EAAE,iDAAiD;QACnE,UAAU,EAAE,0BAA0B;KACvC;IACD;QACE,EAAE,EAAE,SAAS;QACb,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,wBAAwB;QACpC,gBAAgB,EAAE,4DAA4D;QAC9E,UAAU,EAAE,mCAAmC;KAChD;IACD;QACE,EAAE,EAAE,SAAS;QACb,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,+BAA+B;QAC3C,gBAAgB,EAAE,kDAAkD;QACpE,UAAU,EAAE,0BAA0B;KACvC;IACD;QACE,EAAE,EAAE,SAAS;QACb,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,mCAAmC;QAC/C,gBAAgB,EAAE,iDAAiD;QACnE,UAAU,EAAE,kCAAkC;KAC/C;IACD;QACE,EAAE,EAAE,SAAS;QACb,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,6BAA6B;QACzC,gBAAgB,EAAE,oDAAoD;QACtE,UAAU,EAAE,gCAAgC;KAC7C;IACD;QACE,EAAE,EAAE,SAAS;QACb,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,oBAAoB;QAChC,gBAAgB,EAAE,gDAAgD;QAClE,UAAU,EAAE,0BAA0B;KACvC;IACD;QACE,EAAE,EAAE,SAAS;QACb,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,0BAA0B;QACtC,gBAAgB,EAAE,4CAA4C;QAC9D,UAAU,EAAE,8BAA8B;KAC3C;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,sBAAsB;QAChC,UAAU,EAAE,sCAAsC;QAClD,gBAAgB,EAAE,+CAA+C;QACjE,UAAU,EAAE,mBAAmB;KAChC;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,sBAAsB;QAChC,UAAU,EAAE,2BAA2B;QACvC,gBAAgB,EAAE,sDAAsD;QACxE,UAAU,EAAE,oBAAoB;KACjC;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,sBAAsB;QAChC,UAAU,EAAE,uBAAuB;QACnC,gBAAgB,EAAE,oCAAoC;QACtD,UAAU,EAAE,uBAAuB;KACpC;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,sBAAsB;QAChC,UAAU,EAAE,sCAAsC;QAClD,gBAAgB,EAAE,qDAAqD;QACvE,UAAU,EAAE,2BAA2B;KACxC;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,sBAAsB;QAChC,UAAU,EAAE,oDAAoD;QAChE,gBAAgB,EAAE,sDAAsD;QACxE,UAAU,EAAE,oCAAoC;KACjD;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,gBAAgB;QAC1B,UAAU,EAAE,yCAAyC;QACrD,gBAAgB,EAAE,qDAAqD;QACvE,UAAU,EAAE,gCAAgC;KAC7C;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,gBAAgB;QAC1B,UAAU,EAAE,4BAA4B;QACxC,gBAAgB,EAAE,mCAAmC;QACrD,UAAU,EAAE,8BAA8B;KAC3C;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,gBAAgB;QAC1B,UAAU,EAAE,0CAA0C;QACtD,gBAAgB,EAAE,6CAA6C;QAC/D,UAAU,EAAE,uBAAuB;KACpC;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,gBAAgB;QAC1B,UAAU,EAAE,wBAAwB;QACpC,gBAAgB,EAAE,4CAA4C;QAC9D,UAAU,EAAE,6BAA6B;KAC1C;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,gBAAgB;QAC1B,UAAU,EAAE,0CAA0C;QACtD,gBAAgB,EAAE,gDAAgD;QAClE,UAAU,EAAE,oCAAoC;KACjD;CACkD,CAAC;AAEzC,QAAA,sBAAsB,GAAG,2BAAmB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/ai/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./evaluation-dataset-50";
+export * from "./product-knowledge";
+//# sourceMappingURL=index.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/ai/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ai/index.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/ai/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./evaluation-dataset-50"), exports);
+__exportStar(require("./product-knowledge"), exports);
+//# sourceMappingURL=index.js.map

package/bundled/node_modules/@kubbisec/shared/dist/ai/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/ai/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0DAAwC;AACxC,sDAAoC"}

package/bundled/node_modules/@kubbisec/shared/dist/ai/product-knowledge/build-assistant-system-prompt.d.ts

@@ -0,0 +1,7 @@
+export type BuildAssistantSystemPromptInput = {
+    capabilityLines: string[];
+    effectivePermissionKeys: string;
+    screenContextLines: string[];
+};
+export declare function buildAssistantSystemPrompt(input: BuildAssistantSystemPromptInput): string;
+//# sourceMappingURL=build-assistant-system-prompt.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/ai/product-knowledge/build-assistant-system-prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-assistant-system-prompt.d.ts","sourceRoot":"","sources":["../../../src/ai/product-knowledge/build-assistant-system-prompt.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,+BAA+B,GAAG;IAC5C,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,uBAAuB,EAAE,MAAM,CAAC;IAChC,kBAAkB,EAAE,MAAM,EAAE,CAAC;CAC9B,CAAC;AAEF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,+BAA+B,GAAG,MAAM,CA2BzF"}

package/bundled/node_modules/@kubbisec/shared/dist/ai/product-knowledge/build-assistant-system-prompt.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildAssistantSystemPrompt = buildAssistantSystemPrompt;
+const mental_map_1 = require("./mental-map");
+function buildAssistantSystemPrompt(input) {
+    const capabilities = input.capabilityLines.length > 0
+        ? input.capabilityLines.map((l) => `    <capability>${l}</capability>`).join("\n")
+        : "    <capability>Limited permissions in this session</capability>";
+    const screen = input.screenContextLines.length > 0
+        ? input.screenContextLines.map((l) => `    <line>${l}</line>`).join("\n")
+        : "    <line>(general)</line>";
+    return `<kubbisec-assistant>
+  <role>KubbiSec Assistant specialized in ASPM findings, NAUS CI/CD pipelines, secure remediation, and coding in the user's repositories. Goal: understand → decide → execute → verify.</role>
+${mental_map_1.KUBBISEC_PRODUCT_MENTAL_MAP_XML}
+  <persona>
+    <rule>Practical, concise Markdown for engineers.</rule>
+    <rule>Match user language (Portuguese when they write in Portuguese).</rule>
+    <rule>Use tools for tenant data and allowed actions. Never claim you ran a tool without a successful tool_result.</rule>
+    <rule>For destructive actions (auto remediation, PR creation), use start_ai_remediation_run with mode "suggestion" unless the user explicitly asked for automatic apply AND you confirmed permissions.</rule>
+  </persona>
+  <rbac>
+${capabilities}
+    <effective-keys>${input.effectivePermissionKeys}</effective-keys>
+  </rbac>
+  <screen-context>
+${screen}
+  </screen-context>
+</kubbisec-assistant>`;
+}
+//# sourceMappingURL=build-assistant-system-prompt.js.map

package/bundled/node_modules/@kubbisec/shared/dist/ai/product-knowledge/build-assistant-system-prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-assistant-system-prompt.js","sourceRoot":"","sources":["../../../src/ai/product-knowledge/build-assistant-system-prompt.ts"],"names":[],"mappings":";;AAQA,gEA2BC;AAnCD,6CAA+D;AAQ/D,SAAgB,0BAA0B,CAAC,KAAsC;IAC/E,MAAM,YAAY,GAChB,KAAK,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC;QAC9B,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAClF,CAAC,CAAC,kEAAkE,CAAC;IACzE,MAAM,MAAM,GACV,KAAK,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC;QACjC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QACzE,CAAC,CAAC,4BAA4B,CAAC;IAEnC,OAAO;;EAEP,4CAA+B;;;;;;;;EAQ/B,YAAY;sBACQ,KAAK,CAAC,uBAAuB;;;EAGjD,MAAM;;sBAEc,CAAC;AACvB,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/ai/product-knowledge/build-chat-system-prompt.d.ts

@@ -0,0 +1,7 @@
+export type BuildChatSystemPromptInput = {
+    productName: string;
+    /** Inner <rule>…</rule> nodes only (no outer <rules> wrapper required). */
+    channelRulesXml: string;
+};
+export declare function buildChatSystemPrompt(input: BuildChatSystemPromptInput): string;
+//# sourceMappingURL=build-chat-system-prompt.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/ai/product-knowledge/build-chat-system-prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-chat-system-prompt.d.ts","sourceRoot":"","sources":["../../../src/ai/product-knowledge/build-chat-system-prompt.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,0BAA0B,GAAG;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,0BAA0B,GAAG,MAAM,CAQ/E"}

package/bundled/node_modules/@kubbisec/shared/dist/ai/product-knowledge/build-chat-system-prompt.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildChatSystemPrompt = buildChatSystemPrompt;
+const mental_map_1 = require("./mental-map");
+function buildChatSystemPrompt(input) {
+    return `<kubbisec-ai>
+  <role>${input.productName} — ASPM findings, NAUS CI/CD pipelines, secure remediation, and coding in the repository. Same knowledge and tool contracts as @kubbisec/mcp (MCP tools).</role>
+${mental_map_1.KUBBISEC_PRODUCT_MENTAL_MAP_XML}
+  <rules>
+${input.channelRulesXml}
+  </rules>
+</kubbisec-ai>`;
+}
+//# sourceMappingURL=build-chat-system-prompt.js.map

package/bundled/node_modules/@kubbisec/shared/dist/ai/product-knowledge/build-chat-system-prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-chat-system-prompt.js","sourceRoot":"","sources":["../../../src/ai/product-knowledge/build-chat-system-prompt.ts"],"names":[],"mappings":";;AAQA,sDAQC;AAhBD,6CAA+D;AAQ/D,SAAgB,qBAAqB,CAAC,KAAiC;IACrE,OAAO;UACC,KAAK,CAAC,WAAW;EACzB,4CAA+B;;EAE/B,KAAK,CAAC,eAAe;;eAER,CAAC;AAChB,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/ai/product-knowledge/cli-reference-index.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Compact CLI index preloaded into kubbisec chat system prompt.
+ * Keep in sync with apps/web/.../aspm-commands.md, naus-commands.md, and ai-commands.md.
+ */
+export declare const KUBBISEC_CLI_REFERENCE_INDEX = "<cli-reference-index>\nASPM CLI (npm install -g @kubbisec/aspm):\n| Command | Purpose |\n| aspm init | Interactive setup |\n| aspm login | Configure credentials |\n| aspm whoami | Show current config |\n| aspm doctor | Diagnose configuration |\n| aspm scan <file> -s <source> | Local parse only (no API upload) |\n| aspm parse <file> -s <source> | Local dry-run parse |\n| aspm upload <file> -s <source> | Upload security report to API |\n| aspm coverage <file> | Upload coverage (lcov) |\n| aspm parse-coverage <file> | Local coverage parse |\n| aspm gate | Evaluate local reports against inline rules |\n| aspm projects | List org projects |\n| aspm dashboard | Terminal security posture summary |\nGlobal flags: -k/--api-key, -o/--org (org slug, e.g. minha-empresa), -p/--project\nAPI key: Perfil \u2192 API Keys (/profile/api-keys), prefix aspm_\nEnv: KUBBISEC_API_KEY, KUBBISEC_ORG_ID (slug), KUBBISEC_PROJECT (aliases ASPM_API_URL, ASPM_API_KEY, ASPM_ORG_ID)\nScanners (-s): trivy, gitleaks, syft, osv, semgrep, sonar, nmap, skipfish\nReport files: trivy-report.json, gitleaks-report.json, sbom.json, osv-report.json, semgrep-report.json, sonar-report.json, nmap-report.xml, skipfish-report.json\nPer-scanner install (Linux/macOS/Windows): aspm_docs section aspm-scanner-{name} (e.g. aspm-scanner-trivy, aspm-scanner-semgrep)\nCoverage frameworks: aspm_docs section aspm-coverage (Jest, Vitest, pytest, JaCoCo\u2192lcov, PHPUnit/clover, Go)\n\nNAUS CLI (npm install -g @kubbisec/naus):\n| Command | Purpose |\n| naus register [token] [--renew] | Enroll runner (mTLS bootstrap) |\n| naus start [--daemon] [--allow-privileged] | Start runner daemon |\n| naus migrate | Migrate legacy token runner to mTLS |\n| naus validate <file> / naus check <file> | Validate pipeline YAML |\n| naus plan <file> [--format mermaid] | Show dependency waves |\n| naus run <file> | Execute pipeline locally |\n| naus daemon list / naus daemon stop | Background runner sessions |\nDefault pipeline file: .naus.yml\nLocal env: naus run .naus.yml [--env-file .env] [--secret-file .secrets|.secret] (repeatable; defaults .env/.secrets in cwd).\nCloud secrets: Env Packs in KubbiSec UI (not .secrets on remote runner).\nEnv: NAUS_BOOTSTRAP_TOKEN, NAUS_RENEW_RUNNER\n\nKubbiSec AI CLI (npm install -g @kubbisec/ai):\n| Command | Purpose |\n| kubbisec login / logout / whoami | API session |\n| kubbisec doctor | Diagnose CLI setup |\n| kubbisec ls / show <id> | List/show findings |\n| kubbisec fix <id> [-m auto] | AI remediation |\n| kubbisec chat | Interactive terminal chat |\n| kubbisec do [intent] | Orchestrated agent run |\n| kubbisec watch [--logs] | Remediation queue daemon |\n| kubbisec daemon list|logs|stop | Manage watch sessions |\n| kubbisec ap | Trigger Autopilot cycle |\n| kubbisec naus \u2026 / kubbisec aspm \u2026 | CLI hub forwarding |\nAPI key: Perfil \u2192 API Keys (/profile/api-keys), prefix kbs_\nOrg: -o minha-empresa (slug)\nFull docs: ai_docs (index) or section ai-commands\n\nNAUS YAML (NOT GitHub Actions): top-level run: (never jobs:); script: + depends_on: (never commands:/needs:); ASPM jobs kind: aspm|aspm_matrix|aspm_gate with tool: (never scanner:).\nFull docs via tools: aspm_docs (section aspm-commands), naus_pipeline_docs (naus-commands, naus-pipeline-overview, naus-aspm-integration), ai_docs (KubbiSec AI CLI).\naspm-cicd.md is GitHub Actions only \u2014 do not use for NAUS pipelines.\n</cli-reference-index>";
+//# sourceMappingURL=cli-reference-index.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/ai/product-knowledge/cli-reference-index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-reference-index.d.ts","sourceRoot":"","sources":["../../../src/ai/product-knowledge/cli-reference-index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,eAAO,MAAM,4BAA4B,k3GAwDlB,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/ai/product-knowledge/cli-reference-index.js

@@ -0,0 +1,65 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KUBBISEC_CLI_REFERENCE_INDEX = void 0;
+/**
+ * Compact CLI index preloaded into kubbisec chat system prompt.
+ * Keep in sync with apps/web/.../aspm-commands.md, naus-commands.md, and ai-commands.md.
+ */
+exports.KUBBISEC_CLI_REFERENCE_INDEX = `<cli-reference-index>
+ASPM CLI (npm install -g @kubbisec/aspm):
+| Command | Purpose |
+| aspm init | Interactive setup |
+| aspm login | Configure credentials |
+| aspm whoami | Show current config |
+| aspm doctor | Diagnose configuration |
+| aspm scan <file> -s <source> | Local parse only (no API upload) |
+| aspm parse <file> -s <source> | Local dry-run parse |
+| aspm upload <file> -s <source> | Upload security report to API |
+| aspm coverage <file> | Upload coverage (lcov) |
+| aspm parse-coverage <file> | Local coverage parse |
+| aspm gate | Evaluate local reports against inline rules |
+| aspm projects | List org projects |
+| aspm dashboard | Terminal security posture summary |
+Global flags: -k/--api-key, -o/--org (org slug, e.g. minha-empresa), -p/--project
+API key: Perfil → API Keys (/profile/api-keys), prefix aspm_
+Env: KUBBISEC_API_KEY, KUBBISEC_ORG_ID (slug), KUBBISEC_PROJECT (aliases ASPM_API_URL, ASPM_API_KEY, ASPM_ORG_ID)
+Scanners (-s): trivy, gitleaks, syft, osv, semgrep, sonar, nmap, skipfish
+Report files: trivy-report.json, gitleaks-report.json, sbom.json, osv-report.json, semgrep-report.json, sonar-report.json, nmap-report.xml, skipfish-report.json
+Per-scanner install (Linux/macOS/Windows): aspm_docs section aspm-scanner-{name} (e.g. aspm-scanner-trivy, aspm-scanner-semgrep)
+Coverage frameworks: aspm_docs section aspm-coverage (Jest, Vitest, pytest, JaCoCo→lcov, PHPUnit/clover, Go)
+
+NAUS CLI (npm install -g @kubbisec/naus):
+| Command | Purpose |
+| naus register [token] [--renew] | Enroll runner (mTLS bootstrap) |
+| naus start [--daemon] [--allow-privileged] | Start runner daemon |
+| naus migrate | Migrate legacy token runner to mTLS |
+| naus validate <file> / naus check <file> | Validate pipeline YAML |
+| naus plan <file> [--format mermaid] | Show dependency waves |
+| naus run <file> | Execute pipeline locally |
+| naus daemon list / naus daemon stop | Background runner sessions |
+Default pipeline file: .naus.yml
+Local env: naus run .naus.yml [--env-file .env] [--secret-file .secrets|.secret] (repeatable; defaults .env/.secrets in cwd).
+Cloud secrets: Env Packs in KubbiSec UI (not .secrets on remote runner).
+Env: NAUS_BOOTSTRAP_TOKEN, NAUS_RENEW_RUNNER
+
+KubbiSec AI CLI (npm install -g @kubbisec/ai):
+| Command | Purpose |
+| kubbisec login / logout / whoami | API session |
+| kubbisec doctor | Diagnose CLI setup |
+| kubbisec ls / show <id> | List/show findings |
+| kubbisec fix <id> [-m auto] | AI remediation |
+| kubbisec chat | Interactive terminal chat |
+| kubbisec do [intent] | Orchestrated agent run |
+| kubbisec watch [--logs] | Remediation queue daemon |
+| kubbisec daemon list|logs|stop | Manage watch sessions |
+| kubbisec ap | Trigger Autopilot cycle |
+| kubbisec naus … / kubbisec aspm … | CLI hub forwarding |
+API key: Perfil → API Keys (/profile/api-keys), prefix kbs_
+Org: -o minha-empresa (slug)
+Full docs: ai_docs (index) or section ai-commands
+
+NAUS YAML (NOT GitHub Actions): top-level run: (never jobs:); script: + depends_on: (never commands:/needs:); ASPM jobs kind: aspm|aspm_matrix|aspm_gate with tool: (never scanner:).
+Full docs via tools: aspm_docs (section aspm-commands), naus_pipeline_docs (naus-commands, naus-pipeline-overview, naus-aspm-integration), ai_docs (KubbiSec AI CLI).
+aspm-cicd.md is GitHub Actions only — do not use for NAUS pipelines.
+</cli-reference-index>`;
+//# sourceMappingURL=cli-reference-index.js.map

package/bundled/node_modules/@kubbisec/shared/dist/ai/product-knowledge/cli-reference-index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-reference-index.js","sourceRoot":"","sources":["../../../src/ai/product-knowledge/cli-reference-index.ts"],"names":[],"mappings":";;;AAAA;;;GAGG;AACU,QAAA,4BAA4B,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBAwDrB,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/ai/product-knowledge/format-mcp-knowledge.d.ts

@@ -0,0 +1,8 @@
+export type McpKnowledgePayload = {
+    instructions?: string;
+    tools?: string[] | Record<string, unknown>;
+    assistantToolsAlignedWithMcp?: Record<string, string>;
+    cursorMcpPackage?: string;
+};
+export declare function formatMcpKnowledgeForSystemPrompt(payload: McpKnowledgePayload): string;
+//# sourceMappingURL=format-mcp-knowledge.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/ai/product-knowledge/format-mcp-knowledge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format-mcp-knowledge.d.ts","sourceRoot":"","sources":["../../../src/ai/product-knowledge/format-mcp-knowledge.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,mBAAmB,GAAG;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,4BAA4B,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtD,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,wBAAgB,iCAAiC,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,CA0BtF"}

package/bundled/node_modules/@kubbisec/shared/dist/ai/product-knowledge/format-mcp-knowledge.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.formatMcpKnowledgeForSystemPrompt = formatMcpKnowledgeForSystemPrompt;
+const MAX_MCP_PROMPT_CHARS = 28_000;
+function formatMcpKnowledgeForSystemPrompt(payload) {
+    const parts = [
+        "<kubbisec-mcp-knowledge>",
+        "You have the same KubbiSec knowledge surface as the @kubbisec/mcp server (action tools; docs via Platform Assistant).",
+        "Use assistant tools listed below — they mirror MCP tools where applicable.",
+    ];
+    if (payload.instructions?.trim()) {
+        parts.push("", "## MCP instructions", payload.instructions.trim());
+    }
+    if (payload.tools) {
+        parts.push("", "## MCP tools", JSON.stringify(payload.tools, null, 2));
+    }
+    if (payload.assistantToolsAlignedWithMcp) {
+        parts.push("", "## Tool mapping (MCP ↔ kubbisec chat)", JSON.stringify(payload.assistantToolsAlignedWithMcp, null, 2));
+    }
+    if (payload.cursorMcpPackage) {
+        parts.push("", payload.cursorMcpPackage);
+    }
+    parts.push("</kubbisec-mcp-knowledge>");
+    const text = parts.join("\n");
+    if (text.length <= MAX_MCP_PROMPT_CHARS)
+        return text;
+    return `${text.slice(0, MAX_MCP_PROMPT_CHARS)}\n\n…[MCP knowledge truncated — call kubbisec_mcp_knowledge or aspm_docs / naus_pipeline_docs for full text]`;
+}
+//# sourceMappingURL=format-mcp-knowledge.js.map

package/bundled/node_modules/@kubbisec/shared/dist/ai/product-knowledge/format-mcp-knowledge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format-mcp-knowledge.js","sourceRoot":"","sources":["../../../src/ai/product-knowledge/format-mcp-knowledge.ts"],"names":[],"mappings":";;AASA,8EA0BC;AAnCD,MAAM,oBAAoB,GAAG,MAAM,CAAC;AASpC,SAAgB,iCAAiC,CAAC,OAA4B;IAC5E,MAAM,KAAK,GAAa;QACtB,0BAA0B;QAC1B,uHAAuH;QACvH,4EAA4E;KAC7E,CAAC;IACF,IAAI,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,qBAAqB,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,OAAO,CAAC,4BAA4B,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,CACR,EAAE,EACF,uCAAuC,EACvC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,4BAA4B,EAAE,IAAI,EAAE,CAAC,CAAC,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC3C,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,IAAI,CAAC,MAAM,IAAI,oBAAoB;QAAE,OAAO,IAAI,CAAC;IACrD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,8GAA8G,CAAC;AAC9J,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/ai/product-knowledge/index.d.ts

@@ -0,0 +1,7 @@
+export { type BuildAssistantSystemPromptInput, buildAssistantSystemPrompt, } from "./build-assistant-system-prompt";
+export { type BuildChatSystemPromptInput, buildChatSystemPrompt, } from "./build-chat-system-prompt";
+export { KUBBISEC_CLI_REFERENCE_INDEX } from "./cli-reference-index";
+export { formatMcpKnowledgeForSystemPrompt, type McpKnowledgePayload, } from "./format-mcp-knowledge";
+export { KUBBISEC_MCP_INSTRUCTIONS } from "./mcp-instructions";
+export { KUBBISEC_PRODUCT_MENTAL_MAP_XML } from "./mental-map";
+//# sourceMappingURL=index.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/ai/product-knowledge/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/ai/product-knowledge/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,+BAA+B,EACpC,0BAA0B,GAC3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,KAAK,0BAA0B,EAC/B,qBAAqB,GACtB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EACL,iCAAiC,EACjC,KAAK,mBAAmB,GACzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,+BAA+B,EAAE,MAAM,cAAc,CAAC"}